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The above-described changes to the FBI targeting procedures pose no obstacle to a 
finding by the Court that the FBI targeting procedures are “reasonably designed” to “ensure that 
any acquisition authorized ... is limited to targeting persons reasonably believed to be located 
outside the United States” and to “prevent the intentional acquisition of any communication as to 
which the sender and all intended recipients are known at the time of the acquisition to be located 
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Furthermore, as the Court has previously noted, before the FBI targeting procedures are 
applied, NSA will have followed its own targeting procedures in determining that the user of the 
facility to be tasked for collection is a non-United States person reasonably believed to be located 
outside the United States. See Docket No. The 



| Id The Court has previously found that 

| proposed for use in connection with Certifications are 

reasonably designed to ensure that the users of tasked selectors are non-United States persons 
reasonably believed to be located outside the United States and also consistent with the Fourth 
Amendment. See Docket No | 

It therefore follows that the 

amended FBI targeting procedures, which provide additional assurance that the users of tasked 
accounts are non-United States persons located outside the United States, also pass muster. 

2. The Amended NSA Minimization Procedures 
The most significant change to the NSA minimization procedures regards the rules for 
querying the data that NSA acquires pursuant to Section 702. The procedures previously 
approved by the Court effectively impose a wholesale bar on queries using United States-Person 
identifiers. The government has broadened Section 3(b)(5) to allow NSA to query the vast 
majority of its Section 702 collection using United States-Person identifiers, subject to approval 
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pursuant to internal NSA procedures and oversight by the Department of Justice. 21 Like all other 

NSA queries of the Section 702 collection, queries using United States-person identifiers would 
be limited to those reasonably likely to yield foreign intelligence information. NSA 
Minimization Procedures § 3(b)(5). The Department of Justice and the Office of the DNI would 
be required to conduct oversight regarding NSA’s use of United States-person identifiers in such 
queries. See id. 

This relaxation of the querying rules does not alter the Court’s prior conclusion that NSA 
minimization procedures meet the statutory definition of minimization procedures. 




queries of unminimized FISA-acquired information using identifiers - including United States- 
person identifiers - when such queries are designed to yield foreign intelligence information. 
See^^^^^^m In granting applications for electronic surveillance or 

physical search since 2008, including applications targeting United States persons and persons in 
the United States, the Court has found that the 'HlHi meet the definitions of minimization 
procedures at 50 U.S.C. §§ 1801(h) and 1821(4). It follows that the substantially-similar 



21 The government is still in the process of developing its internal procedures and will 
not permit N SA analysts to begin using United States-person identifiers as selection terms until 
those procedures are completed. June 28 Submission at 4 n.3. In addition, the government has 
clarified that United States-person identifiers will not be used to query the fruits of NSA’s 
upstream collection. Aug. 30 Submission at 1 1. NSA’s upstream collection acquires 
approximately 9% of the total Internet communications acquired by NSA under Section 702. 
Aug. 16 Submission at 2. 
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querying provision found at Section 3(b)(5) of the amended NSA minimization procedures 
should not be problematic in a collection that is focused on non-United States persons located 
outside the United States and that, in the aggregate, is less likely to result in the acquisition of 
nonpublic information regarding non-consenting United States persons. 

A second change to the NSA minimization procedures is the addition of language 
specifying that the five-year retention period for communications that are not subject to earlier 
destruction runs from the expiration date of the certification authorizing the collection. See NSA 
Minimization Procedures, §§ 3(b)(1), 3(c), 5(3)(b), and 6(a)(1)(b). The NSA minimization 
procedures that were previously approved by the Court included a retention period of five years, 
but those procedures do not specify when the five-year period begins to run. The change 
proposed here harmonizes the procedures with the corresponding provision of the 
minimization procedures for Section 702 that has already been approved by the Court. See 
Minimization Procedures at 3 flf j). 

The two remaining changes to the NSA minimization procedures are intended to clarify 
the scope of the existing procedures. The government has added language to Section 1 to make 
explicit that the procedures apply not only to NSA employees, but also to any other persons 
engaged in Section 702-related activities that are conducted under the direction, authority or 
control of the Director of NSA. NSA Minimization Procedures at 1. According to the 
government, this new language is intended to clarify that Central Security Service personnel 
conducting signals intelligence operations authorized by Section 702 are bound by the 
procedures, even when they are deployed with a military unit and subject to the military chain of 
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command. The second clarifying amendment is a change to the definition of “identification of a 

United States person” in Section 2. The new language eliminates a potential ambiguity that 



might have resulted in the inappropriate treatment of the name, unique title, or address of a 
United States person as non-identifying information in certain circumstances. Id. at 2. These 
amendments, which resolve any arguable ambiguity in favor of broader application of the 
protections found in the procedures, raise no concerns. 

3. The Amended CIA Minimization Procedures 
The CIA minimization procedures include a new querying provision | 



[ The new language would allow the CIA to 
conduct queries of Section 702-acquired information using United States-person identifiers. All 
CIA queries of the Section 702 collection would be subject to review by the Department of 
Justice and the Office of the DNI. j| 

the addition of the 

new CIA querying provision does not preclude the Court from concluding that the amended CIA 
minimization procedures satisfy the statutory definition of minimization procedures and comply 
with the Fourth Amendment. 22 

The amended CIA minimization procedures include | 



22 The Court understands that NS A does not share its upstr eam collection in 
unminimized form with the CIA. T 
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raises no concerns in the context of the CIA minimization procedures. 











The government also has added 





TOP~SE € R ET//C O MINT//ORCON,NO FORN- 



Page 26 























TOP SECRET//COMINT//ORCON,NOFQRN 




D. The Effect of the Government’s Disclosures Regarding NSA’s Acquisition of 

Internet Transactions 



Based on the government’s prior representations, the Court has previously analyzed 
NSA’s targeting and minimization procedures only in the context of NSA acquiring discrete 
communications. Now, however, in light of the government’s revelations as to the manner in 
which NSA acquires Internet communications, it is clear that NSA acquires “Internet 
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transactions,” 23 including transactions that contain a single discrete communication (“Single 
Communication Transactions” or “SCTs”), and transactions that contain multiple discrete 
communications (“Multi- [C]ommunication Transactions” or “MCTs”), see Aug. 16 Submission 
at 1. 

The Court has repeatedly noted that the government’s targeting and minimization 
procedures must be considered in light of the communications actually acquired. See Docket No. 



notwithstanding the government’s intent, speak to whether the applicable targeting procedures 



United States.”), see also Docket No. 

Until now, the Court had a singular understanding of the nature of NSA’s acquisitions under 
Section 702. Accordingly, analysis of the implementation of the procedures focused on whether 
NSA’s procedures were applied effectively in that context and whether the procedures adequately 
addressed over-collections that occurred. But, for the first time, the government has now advised 
the Court that the volume and nature of the information it has been collecting is fundamentally 
different from what the Court had been led to believe. Therefore, the Court must, as a matter of 
first impression, consider whether, in view of NSA’s acquisition of Internet transactions, the 
targeting and minimization procedures satisfy the statutory standards and comport with the 



23 The government describes an Internet “transaction” as “a complement of ‘packets’ 
traversing the Internet that together may be understood by a device on the Internet and, where 
applicable, rendered in an intelligible form to the user of that device.” June 1 Submission at 1 




(“Substantial implementation problems can, 



are ‘reasonably designed’ to acquire only the communications of non-U.S. persons outside the 
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Fourth Amendment. 

For the reasons set forth below, the Court finds that NSA’s targeting procedures, as the 
government proposes to implement them in connection with MCTs, are consistent with the 
requirements of 50 U.S.C. §1881a(d)(l). However, the Court is unable to find that NSA’s 
minimization procedures, as the government proposes to apply them in connection with MCTs, 
are “reasonably designed in light of the purpose and technique of the particular [surveillance or 
physical search], to minimize the acquisition and retention, and prohibit the dissemination, of 
nonpublicly available information concerning unconsenting United States persons consistent 
with the need of the United States to obtain, produce, and disseminate foreign intelligence 
information.” 50 U.S.C. §§ 1801(h)(1) &1821(4)(A). The Court is also unable to find that 
NSA’s targeting and minimization procedures, as the government proposes to implement them in 
connection with MCTs, are consistent with the Fourth Amendment. 

1. The Scope of NSA’s Upstream Collection 

NS A acquires more than two hundred fifty million Internet communications each year 
pursuant to Section 702, but the vast majority of these communications are obtained from 
Internet service providers and are not at issue here. 24 Sept. 9 Submission at 1; Aug. 16 
Submission at Appendix A. Indeed, NSA’s upstream collection constitutes only approximately 



24 In addition to its upstream c ollection, NSA acquires discrete Internet communications 
from Int ernet service providers such as 

j Aug. 16 Submission at 2; Aug. 30 Submission at 1 1 ; see also Sept. 7, 201 1 Hearing Tr. 
at 75-77. NSA refers to this non-upstream collection as its “PRISM collection.” Aug. 30 
Submission at 1 1 . The Court understands that NSA does not acquire “Internet transactions” 
through its PRISM collection. See Aug. 16 Submission at 1. 
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9% of the total Internet communications being acquired by NSA under Section 702. Sept. 9 
Submission at 1; Aug. 16 Submission at 2. 

Although small in relative terms, NSA’s upstream collection is significant for three 
reasons. First, NSA’s upstream collection is “uniquely capable of acquiring certain types of 
targeted communications containing valuable foreign intelligence information.” 25 Docket No, 




Second, the Court now understands that, in order to collect those targeted Internet 
communications, NSA’s upstream collection devices acquire Internet transactions, and NSA 
acquires millions of such transactions each year. 26 Third, the government has acknowledged that, 
due to the technological challenges associated with acquiring Internet transactions, NSA is 
unable to exclude certain Internet transactions from its upstream collection. See June 1 
Submission at 3-12. 



In its June 1 Submission, the government explained that NSA’s upstream collection 
devices have technological limitations that significantly affect the scope of collection. | 





26 NSA acquired more than 13.25 million Internet transactions through its upstream 
collection between January 1, 2011, and June 30, 2011. See Aug. 16 Submission at 2; see also 
Sept. 9 Submission at 1-2. 
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